Cannot get specific about update permissions
I think that one of the main things missing here is the ability to get fine grained control about updates.
I need to let some users update a pubsweet fragment, but I only want to let them update one field of the fragment, and only if the value of that field was something specific before.
Right now, I can only tell authsome that the user has update permissions on that fragment.
In essence, yes the user can update, but update what?
What would be needed there would probably be the previous state of the fragment, so that the comparison could be performed in my authsome module.
I can do the checks in the frontend of course, but that is never a good idea when it comes to permissions.